last executing test programs: 2m47.61228046s ago: executing program 1 (id=1441): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4200, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) 2m46.581320937s ago: executing program 1 (id=1446): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={0x0}, 0x118}, 0x81) 2m46.516163497s ago: executing program 1 (id=1448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sync() 2m46.373051219s ago: executing program 1 (id=1452): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffffff, 0x0, 0x6a1c2, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e3659902368a, 0x20001, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x54}}, 0x0) 2m45.640073181s ago: executing program 1 (id=1457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 2m44.144420144s ago: executing program 1 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x472}, 0x94) 2m43.401180006s ago: executing program 32 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x472}, 0x94) 5.861465799s ago: executing program 3 (id=2213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x102}, 0x18) unlink(&(0x7f0000000380)='./file1\x00') 4.816697365s ago: executing program 3 (id=2217): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@random="49a188da23ac", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0xb0, 0x0, 0x0, 0x3, 0x11, 0x0, @multicast2, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "2515fa651083b17749586746e24710cf4ca49f14af074799d59008e6209ac7b8", "1c3198458572655d0bef5817b21f8987387ab608e7f34e51fc7892f106e0bb50fadf2809be220db8f1e9cd5bec2e41d2", "074a9c000000001000000000db0000000000000000008000", {"28e0ca6aebadbc97c3ba9dd5b88ce8cf", "468faf43766608156fc4d240202b02a7"}}}}}}}, 0x0) 3.413325927s ago: executing program 3 (id=2221): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 3.113256982s ago: executing program 3 (id=2223): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000003bffffff000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c20000000000000000000806000108000604000affffffffff6d45000001aaaaaaaaaa177f000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.180478696s ago: executing program 3 (id=2238): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x3f, 0x9d, 0x29}, 0x2c) 1.980771989s ago: executing program 2 (id=2240): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x52}, 0x28) 1.959489949s ago: executing program 3 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r2) 1.93073239s ago: executing program 2 (id=2242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000200)={@nfc_llcp={0x27, r2, 0x0, 0x6, 0x9, 0x1, "38960201cf52291704ac926d492606e1b760290e14ac6d7fd5d5cd85f9ed2444e2844de7b4423ff9d97a2fc9cf3a2dea67f19118c70450ddc5e2c2ca192a23", 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, &(0x7f00000001c0), 0x66}, 0xa0) getsockopt$bt_hci(r1, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1.704351433s ago: executing program 0 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0xa98) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r8, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x7de, 0x101, 0x0, 0x8, 0x0}) pipe2$9p(&(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='net/arp\x00') socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="7a5877a36b440f95d74bf19e2eb2d58e9c0ef0", 0x13}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000380)="8f35676c9efc799921209bcfec9e231a6d326e8c019afb0383255b4d57c755cac46e3f1f891ce33c9325318c349d9b928b6d816a384984bd8e4097c580d8bee5949891a672b329e6d23640bb46ed41aaf841ad976e6f26143442cd1bac8c0d0903a073df2fe85de60fe222e660da7d670532a0844d28bd09e5825d9b74e4a207b1e42c4fca3c5f17696e319fca04f3bd950f9ac46143240d597d00fb16dfde60f9404e2d4d8e3dc4b6083e083027619bcd0d8aad2d3658b718d64b02d2d8f68599d9d45612e8a02c639c8d649df073a4816f31e5ad4cf92f0d2ec80f492037ade1e5b940079e89", 0xe7}, {&(0x7f0000000480)="ba5ef0e04045dbc31c3a02520899c46ded4b2b9426fc5b2b1d8900f56290b96ad10961199909561a28b4188a98c1187496fc5afd46abec28323b02b389952ef4405c64a636b2afdab79d234e06027ed6311531f9f7fa56921784d7fa7f24d3b1debfd4e6f31f83f55655c85d7e387ceea50b008f96e70f518e6df2", 0x7b}, {&(0x7f0000000500)="91ced262447a739a7645510c0fa6cbd5744375120400a399c86d712442350592836f1da64bfb30785a15447b287d7298ebfca090af634b7f65e6a1087e69aab7ff8f", 0x42}], 0x5}, 0x850) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$RTC_UIE_OFF(r11, 0x7004) 1.548347666s ago: executing program 4 (id=2245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close_range(r0, r1, 0x0) 1.451777298s ago: executing program 0 (id=2246): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.31770303s ago: executing program 4 (id=2247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 1.250850551s ago: executing program 0 (id=2248): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 1.099467663s ago: executing program 0 (id=2249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) 1.028275774s ago: executing program 4 (id=2250): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x0, 0x52}, 0x28) 994.734434ms ago: executing program 0 (id=2251): unshare(0x400) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x404}], 0x1, 0x70000000) 972.390095ms ago: executing program 4 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x9}, 0x0, 0x3, 0x80, 0x80, 0x13, 'syz1\x00', "aa6023c34d654ea336043b8ff485c3c74049f0458c656a1d2fb0802b47b389f6", "70d2748254a391e396de617ae5a06d94d35bfe24cda8c3893969772f44a2e64d", [{0x0, 0x400, {0x2}}, {0xfda, 0x532, {0x1, 0x8}}, {0x4c, 0x69f, {0x1, 0xfffffffa}}, {0x3, 0x2, {0x0, 0x9}}, {0x6, 0x2, {0x1, 0x3}}, {0x0, 0x3, {0x0, 0x85}}, {0x1, 0x16, {0x2, 0x6b}}, {0x1, 0x1c, {0x3, 0xfffffffa}}, {0x5, 0x7, {0x0, 0xd5}}, {0x93a8, 0x2, {0x0, 0x4}}, {0x5, 0x1ff, {0x0, 0x6}}, {0x3, 0x9, {0x3, 0xab85}}, {0x8, 0xfffc, {0x2, 0x5}}, {0x26, 0xed, {0x2, 0x5}}, {0x2, 0x56e6, {0x0, 0x1}}, {0x5, 0x0, {0x3, 0xffffffff}}, {0x7, 0x6, {0x0, 0x81}}, {0x0, 0x3, {0x3, 0x7fffffff}}, {0xb08, 0x0, {0x3, 0x6}}, {0xd3f, 0x5, {0x2, 0x6}}, {0xfff, 0x1, {0x3, 0xffff}}, {0xc8, 0x8, {0x2, 0x8}}, {0x3, 0x5, {0x2, 0x7}}, {0x8, 0x56, {0x0, 0xffffffff}}, {0xb9f1, 0xfff9, {0x2, 0x6}}, {0xd50c, 0x200, {0x1, 0x1}}, {0x1, 0x5, {0x3, 0x3}}, {0x1, 0x4, {0x2, 0x480}}, {0x7, 0x3, {0x2, 0x5}}, {0x2, 0x49, {0x1, 0x1}}, {0x1, 0x3, {0x0, 0x1}}, {0x10, 0xbf, {0x2}}, {0xfa, 0x2, {0x3, 0x8}}, {0x0, 0xffff, {0x0, 0x9}}, {0xff, 0x7ff}, {0x0, 0xe9f7, {0x3}}, {0x9d8, 0x7, {0x0, 0x9}}, {0x7fc, 0xe, {0x2, 0xc6a2}}, {0x2, 0x4, {0x1, 0x400}}, {0x8, 0x1, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) 920.442846ms ago: executing program 2 (id=2253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0xa98) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r8, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x7de, 0x101, 0x0, 0x8, 0x0}) pipe2$9p(&(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='net/arp\x00') socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="7a5877a36b440f95d74bf19e2eb2d58e9c0ef0", 0x13}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000380)="8f35676c9efc799921209bcfec9e231a6d326e8c019afb0383255b4d57c755cac46e3f1f891ce33c9325318c349d9b928b6d816a384984bd8e4097c580d8bee5949891a672b329e6d23640bb46ed41aaf841ad976e6f26143442cd1bac8c0d0903a073df2fe85de60fe222e660da7d670532a0844d28bd09e5825d9b74e4a207b1e42c4fca3c5f17696e319fca04f3bd950f9ac46143240d597d00fb16dfde60f9404e2d4d8e3dc4b6083e083027619bcd0d8aad2d3658b718d64b02d2d8f68599d9d45612e8a02c639c8d649df073a4816f31e5ad4cf92f0d2ec80f492037ade1e5b940079e89", 0xe7}, {&(0x7f0000000480)="ba5ef0e04045dbc31c3a02520899c46ded4b2b9426fc5b2b1d8900f56290b96ad10961199909561a28b4188a98c1187496fc5afd46abec28323b02b389952ef4405c64a636b2afdab79d234e06027ed6311531f9f7fa56921784d7fa7f24d3b1debfd4e6f31f83f55655c85d7e387ceea50b008f96e70f518e6df2", 0x7b}, {&(0x7f0000000500)="91ced262447a739a7645510c0fa6cbd5744375120400a399c86d712442350592836f1da64bfb30785a15447b287d7298ebfca090af634b7f65e6a1087e69aab7ff8f", 0x42}], 0x5}, 0x850) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$RTC_UIE_OFF(r11, 0x7004) 725.060789ms ago: executing program 2 (id=2254): socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) clock_getres(0x5, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 485.598743ms ago: executing program 2 (id=2255): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 300.707446ms ago: executing program 2 (id=2256): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 204.665127ms ago: executing program 4 (id=2257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 144.432878ms ago: executing program 4 (id=2258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 0s ago: executing program 0 (id=2259): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x0, 0x52}, 0x28) kernel console output (not intermixed with test programs): ates cleaned up [ 368.718705][T10185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.739932][T10185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.749891][T10194] loop3: detected capacity change from 0 to 1024 [ 368.772716][T10194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.786631][T10194] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.840020][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 368.915352][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.103528][T10226] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1447'. [ 370.192492][T10232] IPv6: Can't replace route, no match found [ 370.251186][T10235] loop1: detected capacity change from 0 to 1024 [ 370.285365][T10235] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1452: Failed to acquire dquot type 0 [ 370.317963][T10235] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 370.346152][T10235] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1452: corrupted inode contents [ 370.359206][T10235] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #13: comm syz.1.1452: mark_inode_dirty error [ 370.371246][T10235] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1452: corrupted inode contents [ 370.391642][T10235] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1452: mark_inode_dirty error [ 370.432935][T10235] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1452: corrupted inode contents [ 370.459560][T10235] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 370.479480][T10235] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.1452: corrupted inode contents [ 370.496874][T10235] EXT4-fs error (device loop1): ext4_truncate:4288: inode #13: comm syz.1.1452: mark_inode_dirty error [ 370.509855][T10235] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 370.526007][T10235] EXT4-fs (loop1): 1 truncate cleaned up [ 370.533992][T10235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.653779][T10235] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 370.739468][T10235] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 370.771613][T10235] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1452: Failed to acquire dquot type 0 [ 370.801365][T10235] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 370.886068][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.893999][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.936808][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /387/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 370.979804][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 371.033747][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /387/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 371.056881][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 371.080660][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /387/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 371.111492][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 371.148586][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /387/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 371.174621][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 371.198960][ T5786] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /387/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 371.624386][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.660206][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.988469][T10246] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.997344][T10246] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.006250][T10246] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.014847][T10246] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.030534][ T5837] lo speed is unknown, defaulting to 1000 [ 372.144555][ T5786] syz_tun (unregistering): left allmulticast mode [ 372.179363][T10253] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1458'. [ 372.196395][T10253] 0ªî{X¹¦: renamed from gretap0 [ 372.215073][T10253] 0ªî{X¹¦: entered allmulticast mode [ 372.227994][T10253] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 372.315658][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 372.370583][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 372.377112][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 372.383436][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 372.389877][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 372.396468][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.404328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.412277][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.420112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.428053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.435910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.443845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.451693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.459603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.467461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.475425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.483365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.491315][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.499225][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.507169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.515035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.522984][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.530856][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.538788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.546652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.554595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.562440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.570341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.578195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.586120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.593970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.601896][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.609710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.617644][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.625494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.633432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.641284][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.649197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.657073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.665002][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.672851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.680842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.688666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.696641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.704490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.712475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.720307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.728286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.736147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.744108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.751958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.759867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.767717][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.775662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.783510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.791439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.799258][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.807187][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.815048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.822988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.830842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.838759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.846625][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.854563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.862409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.870356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.878214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.886142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.893988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.901946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.909775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.917738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.925588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.933523][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.941369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.949274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.957125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.965051][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.972905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.980856][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 372.988675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 372.996638][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.004481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.012414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.020236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.028241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.036107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.044067][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.051934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.059866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.067741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.075676][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.083536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.091463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.099284][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.107256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.115101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.123058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.130924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 373.138821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 373.146777][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 374.100261][ T993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.168588][T10275] lo speed is unknown, defaulting to 1000 [ 374.275913][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 374.287640][ T993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.296066][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'. [ 374.425467][ T993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.670591][ T993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.855674][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.869285][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.881678][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.904240][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.920117][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 374.931131][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.457142][T10291] lo speed is unknown, defaulting to 1000 [ 375.520468][T10295] netlink: 'syz.0.1474': attribute type 6 has an invalid length. [ 375.554228][ T993] tipc: Disabling bearer [ 375.565959][ T993] tipc: Left network mode [ 375.928958][T10291] chnl_net:caif_netlink_parms(): no params data found [ 376.020804][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 376.098307][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 376.111322][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 376.180860][ T787] usb 1-1: device descriptor read/64, error -71 [ 376.260058][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.267745][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.275179][T10291] bridge_slave_0: entered allmulticast mode [ 376.285565][T10291] bridge_slave_0: entered promiscuous mode [ 376.310416][T10316] futex_wake_op: syz.3.1477 tries to shift op by -1; fix this program [ 376.336776][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.344363][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.353115][T10291] bridge_slave_1: entered allmulticast mode [ 376.360670][T10291] bridge_slave_1: entered promiscuous mode [ 376.471021][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 376.578582][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.618870][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.640845][ T787] usb 1-1: device descriptor read/64, error -71 [ 376.781192][ T787] usb usb1-port1: attempt power cycle [ 376.816187][T10291] team0: Port device team_slave_0 added [ 376.859695][T10291] team0: Port device team_slave_1 added [ 376.890020][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 376.890034][ T27] audit: type=1326 audit(1752898339.237:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 377.001073][ T27] audit: type=1326 audit(1752898339.237:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 377.095943][ T5799] Bluetooth: hci0: command tx timeout [ 377.111211][ T27] audit: type=1326 audit(1752898339.277:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 377.156807][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.169524][T10322] loop2: detected capacity change from 0 to 1024 [ 377.184255][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.219210][ T27] audit: type=1326 audit(1752898339.277:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 377.245901][ T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 377.259852][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.285631][ T787] usb 1-1: device descriptor read/8, error -71 [ 377.299110][T10322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.318416][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.328539][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.406615][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.415697][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.583267][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 377.626992][ T787] usb 1-1: device descriptor read/8, error -71 [ 377.637603][T10291] hsr_slave_0: entered promiscuous mode [ 377.650381][T10291] hsr_slave_1: entered promiscuous mode [ 377.658408][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.669611][T10291] Cannot create hsr debugfs directory [ 377.761111][ T787] usb usb1-port1: unable to enumerate USB device [ 377.839112][ T993] hsr_slave_0: left promiscuous mode [ 377.851697][ T993] hsr_slave_1: left promiscuous mode [ 377.859004][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.871254][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.902267][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.909910][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.924640][ T993] bridge_slave_1: left allmulticast mode [ 377.930479][ T993] bridge_slave_1: left promiscuous mode [ 377.951816][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.979523][ T993] bridge_slave_0: left allmulticast mode [ 377.997438][ T993] bridge_slave_0: left promiscuous mode [ 378.015800][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.099134][ T993] veth0_macvtap: left promiscuous mode [ 378.106262][ T993] veth1_vlan: left promiscuous mode [ 378.111988][ T993] veth0_vlan: left promiscuous mode [ 379.588441][ T5799] Bluetooth: hci0: command tx timeout [ 379.671993][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.678481][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.058903][T10351] loop0: detected capacity change from 0 to 2048 [ 380.090426][T10351] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.143261][ T5785] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 380.246116][ T993] team0 (unregistering): Port device virt_wifi0 removed [ 380.522988][ T993] team0 (unregistering): Port device team_slave_1 removed [ 380.578350][ T993] team0 (unregistering): Port device team_slave_0 removed [ 380.622036][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.658200][T10361] futex_wake_op: syz.0.1493 tries to shift op by -1; fix this program [ 380.696440][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.468819][ T993] bond0 (unregistering): Released all slaves [ 381.680892][ T5799] Bluetooth: hci0: command tx timeout [ 381.790566][T10291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.808587][T10291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.820234][T10291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.837176][T10291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.958273][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.987475][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.109239][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.116443][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.148550][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.155747][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.190136][T10339] lo speed is unknown, defaulting to 1000 [ 382.512967][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.187831][T10291] veth0_vlan: entered promiscuous mode [ 383.288505][T10291] veth1_vlan: entered promiscuous mode [ 383.393640][T10291] veth0_macvtap: entered promiscuous mode [ 383.409500][T10291] veth1_macvtap: entered promiscuous mode [ 383.430830][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.442081][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.454785][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.468829][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.480056][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.501987][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.551869][T10291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.579558][T10411] loop0: detected capacity change from 0 to 1024 [ 383.586594][T10291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.599038][T10291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.608792][T10291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.629076][T10411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 383.641487][T10411] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.103292][ T5799] Bluetooth: hci0: command tx timeout [ 384.305334][T10411] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.1509: lblock 3 mapped to illegal pblock 3 (length 3) [ 384.369953][T10411] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 384.412956][T10411] EXT4-fs (loop0): This should not happen!! Data will be lost [ 384.412956][T10411] [ 384.544074][ T5984] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:33: lblock 8 mapped to illegal pblock 8 (length 8) [ 384.619670][ T5984] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 384.654686][ T5984] EXT4-fs (loop0): This should not happen!! Data will be lost [ 384.654686][ T5984] [ 384.699269][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 384.926543][ T27] audit: type=1326 audit(1752898347.277:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 384.978881][ T27] audit: type=1326 audit(1752898347.277:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 385.038254][ T27] audit: type=1326 audit(1752898347.307:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 385.131639][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1507'. [ 385.200841][ T27] audit: type=1326 audit(1752898347.537:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 385.310830][ T27] audit: type=1326 audit(1752898347.537:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 385.906418][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.026256][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.247244][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.265357][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.134522][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 387.340520][T10444] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 388.377640][T10461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1522'. [ 388.643756][T10462] Bluetooth: MGMT ver 1.22 [ 388.963066][T10467] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 389.157661][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.166787][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.158720][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.165959][T10467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.174570][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.181796][T10467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.578972][T10467] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 391.618316][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 391.645144][T10475] bridge_slave_1: left allmulticast mode [ 391.654518][T10475] bridge_slave_1: left promiscuous mode [ 391.660418][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.670504][T10475] bridge_slave_0: left allmulticast mode [ 391.680436][T10475] bridge_slave_0: left promiscuous mode [ 391.686377][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.149532][T10475] bond0: (slave bridge0): Releasing backup interface [ 392.295542][T10493] pim6reg1: entered promiscuous mode [ 392.301516][T10493] pim6reg1: entered allmulticast mode [ 393.021609][T10546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1539'. [ 393.304824][T10547] loop3: detected capacity change from 0 to 1024 [ 393.335193][T10547] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 393.380180][T10547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.544025][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 393.683749][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.775837][T10575] loop3: detected capacity change from 0 to 1024 [ 395.798759][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 395.824980][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.880210][ T27] audit: type=1800 audit(1752898358.227:886): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1551" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 395.993531][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.950938][T10591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1554'. [ 397.797678][T10594] loop2: detected capacity change from 0 to 512 [ 400.462808][T10594] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 401.413118][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1564'. [ 403.278970][T10637] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 403.308200][T10637] bridge0: port 3(team0) entered blocking state [ 403.340844][T10637] bridge0: port 3(team0) entered disabled state [ 403.347333][T10637] team0: entered allmulticast mode [ 403.381728][T10637] team_slave_0: entered allmulticast mode [ 403.408635][T10637] team_slave_1: entered allmulticast mode [ 403.425044][T10637] team0: left allmulticast mode [ 403.439818][T10637] team_slave_0: left allmulticast mode [ 403.463413][T10637] team_slave_1: left allmulticast mode [ 404.350566][T10646] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 405.322731][T10665] binfmt_misc: register: failed to install interpreter file ./file0 [ 405.335458][T10663] loop4: detected capacity change from 0 to 8192 [ 406.810777][T10678] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 408.176791][T10700] lo speed is unknown, defaulting to 1000 [ 408.889668][T10709] futex_wake_op: syz.4.1593 tries to shift op by -1; fix this program [ 408.988405][T10711] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1597'. [ 410.086093][T10717] loop2: detected capacity change from 0 to 512 [ 410.126516][T10717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.167042][T10717] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1599: invalid block [ 410.196073][T10717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1599: invalid indirect mapped block 4294967295 (level 1) [ 410.349500][T10717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1599: invalid indirect mapped block 4294967295 (level 1) [ 410.426215][T10717] EXT4-fs (loop2): 2 truncates cleaned up [ 410.454554][T10717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.525661][ T27] audit: type=1326 audit(1752898372.877:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 410.646666][ T27] audit: type=1326 audit(1752898372.907:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 410.758102][ T27] audit: type=1326 audit(1752898372.907:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 410.828689][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.871300][ T27] audit: type=1326 audit(1752898372.907:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 410.894004][ T27] audit: type=1326 audit(1752898372.907:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 410.937594][ T27] audit: type=1326 audit(1752898372.907:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40c9f8e9e3 code=0x7ffc0000 [ 411.004733][ T27] audit: type=1326 audit(1752898372.927:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f40c9f8d45f code=0x7ffc0000 [ 411.084113][ T27] audit: type=1326 audit(1752898372.937:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f40c9f8ea37 code=0x7ffc0000 [ 411.153868][ T27] audit: type=1326 audit(1752898372.937:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40c9f8d310 code=0x7ffc0000 [ 411.181369][ T27] audit: type=1326 audit(1752898372.937:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.2.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40c9f8e5ab code=0x7ffc0000 [ 411.301564][T10737] bridge0: entered promiscuous mode [ 411.316133][T10737] bridge0: port 3(macsec1) entered blocking state [ 411.329395][T10737] bridge0: port 3(macsec1) entered disabled state [ 411.341839][T10737] macsec1: entered allmulticast mode [ 411.369408][T10737] bridge0: entered allmulticast mode [ 411.397367][T10737] macsec1: left allmulticast mode [ 411.402654][T10737] bridge0: left allmulticast mode [ 411.417247][T10737] bridge0: left promiscuous mode [ 411.503152][T10742] lo speed is unknown, defaulting to 1000 [ 412.276451][T10773] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.850961][ T5906] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 414.138756][T10804] loop2: detected capacity change from 0 to 8192 [ 414.536378][T10819] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1636'. [ 414.547057][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 415.026508][ T787] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 415.040160][ T787] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 415.047906][ T787] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 415.154013][ T787] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 415.340818][T10833] futex_wake_op: syz.3.1643 tries to shift op by -1; fix this program [ 416.314086][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.329718][ T5906] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 416.338387][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 416.346029][ T5906] usb 3-1: can't read configurations, error -71 [ 417.446195][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'. [ 417.792761][T10855] sd 0:0:1:0: device reset [ 418.120926][T10865] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1656'. [ 418.299082][T10867] loop3: detected capacity change from 0 to 128 [ 418.414710][T10867] syz.3.1659: attempt to access beyond end of device [ 418.414710][T10867] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 419.595089][T10897] loop3: detected capacity change from 0 to 256 [ 419.629467][T10897] FAT-fs (loop3): bogus number of FAT sectors [ 419.648917][T10897] FAT-fs (loop3): Can't find a valid FAT filesystem [ 419.877287][T10901] hub 6-0:1.0: USB hub found [ 419.882979][T10901] hub 6-0:1.0: 1 port detected [ 420.909613][T10912] syz.0.1677[10912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.909744][T10912] syz.0.1677[10912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.928137][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 420.928151][ T27] audit: type=1326 audit(1752898383.277:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.029517][ T27] audit: type=1326 audit(1752898383.277:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.084302][ T27] audit: type=1326 audit(1752898383.277:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.150291][ T27] audit: type=1326 audit(1752898383.287:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.224771][ T27] audit: type=1326 audit(1752898383.287:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.247734][ T27] audit: type=1326 audit(1752898383.287:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.307128][ T27] audit: type=1326 audit(1752898383.287:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.378427][ T27] audit: type=1326 audit(1752898383.287:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.602559][ T27] audit: type=1326 audit(1752898383.287:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 421.626037][ T27] audit: type=1326 audit(1752898383.297:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 423.644577][T10936] smc: net device bond0 applied user defined pnetid SYZ0 [ 423.673531][T10936] smc: net device bond0 erased user defined pnetid SYZ0 [ 423.920835][T10840] Set syz1 is full, maxelem 65536 reached [ 424.096796][T10948] netlink: 'syz.4.1692': attribute type 39 has an invalid length. [ 425.818171][T10970] loop4: detected capacity change from 0 to 8192 [ 425.970918][T10970] loop4: p1 < > p2 p4 [ 425.975095][T10970] loop4: partition table partially beyond EOD, truncated [ 426.006650][T10970] loop4: p1 start 408832 is beyond EOD, truncated [ 426.040882][T10970] loop4: p2 size 8388352 extends beyond EOD, truncated [ 426.944887][T10981] loop4: detected capacity change from 0 to 8192 [ 427.167096][T10987] syz.4.1704: attempt to access beyond end of device [ 427.167096][T10987] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 427.210051][T10987] Buffer I/O error on dev loop4, logical block 57847, async page read [ 427.228729][T10987] syz.4.1704: attempt to access beyond end of device [ 427.228729][T10987] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 427.249299][T10987] Buffer I/O error on dev loop4, logical block 57847, async page read [ 427.348827][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 427.348860][ T27] audit: type=1800 audit(1752898389.697:984): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1704" name="file2" dev="loop4" ino=1048605 res=0 errno=0 [ 428.083973][T10997] atomic_op ffff888078692198 conn xmit_atomic 0000000000000000 [ 428.489884][T11011] netlink: 'syz.4.1714': attribute type 39 has an invalid length. [ 430.813890][T10927] Set syz1 is full, maxelem 65536 reached [ 431.549599][T11034] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 431.563894][T11034] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 431.812802][T11044] loop0: detected capacity change from 0 to 512 [ 431.820274][T11044] EXT4-fs: Ignoring removed nobh option [ 431.838577][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1727: corrupted inode contents [ 431.857365][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 431.859732][T11044] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #3: comm syz.0.1727: mark_inode_dirty error [ 431.887879][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.1727: corrupted inode contents [ 431.900476][T11044] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1727: mark_inode_dirty error [ 431.914959][T11044] Quota error (device loop0): write_blk: dquota write failed [ 431.924109][T11044] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 431.934420][T11044] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1727: Failed to acquire dquot type 0 [ 431.947206][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1727: corrupted inode contents [ 431.964704][T11044] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.1727: mark_inode_dirty error [ 431.978751][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1727: corrupted inode contents [ 431.995084][T11044] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1727: mark_inode_dirty error [ 432.007675][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1727: corrupted inode contents [ 432.020440][T11044] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 432.029658][T11044] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.1727: corrupted inode contents [ 432.042378][T11044] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.1727: mark_inode_dirty error [ 432.058097][T11044] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 432.068399][T11044] EXT4-fs (loop0): 1 truncate cleaned up [ 432.079762][T11044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.095723][T11044] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.219912][T11065] loop3: detected capacity change from 0 to 1024 [ 432.315603][T11065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.407974][T11044] (null): rxe_set_mtu: Set mtu to 1024 [ 432.447239][T11070] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1734: bg 0: block 32: padding at end of block bitmap is not set [ 433.493007][T11070] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 433.579335][T11070] EXT4-fs (loop3): This should not happen!! Data will be lost [ 433.579335][T11070] [ 433.636523][T11074] loop4: detected capacity change from 0 to 128 [ 433.684379][T11074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.732271][T11074] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 433.797253][T11070] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 368 with max blocks 8 with error 28 [ 433.854966][T11070] EXT4-fs (loop3): This should not happen!! Data will be lost [ 433.854966][T11070] [ 433.889021][T10291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.900370][T11070] EXT4-fs (loop3): Total free blocks count 0 [ 433.917611][T11070] EXT4-fs (loop3): Free/Dirty block details [ 433.942529][T11070] EXT4-fs (loop3): free_blocks=68719476736 [ 433.995843][T11070] EXT4-fs (loop3): dirty_blocks=16 [ 434.015947][T11070] EXT4-fs (loop3): Block reservation details [ 434.050198][T11044] infiniband syz!: set down [ 434.069805][T11044] infiniband syz!: added team_slave_0 [ 434.086824][T11044] syz!: rxe_create_cq: returned err = -12 [ 434.110876][T11044] infiniband syz!: Couldn't create ib_mad CQ [ 434.121079][T11044] infiniband syz!: Couldn't open port 1 [ 434.189978][T11044] RDS/IB: syz!: added [ 434.199309][T11044] smc: adding ib device syz! with port count 1 [ 434.223620][T11044] smc: ib device syz! port 1 has pnetid [ 437.399926][T11099] loop4: detected capacity change from 0 to 8192 [ 437.430571][T11099] syz.4.1745: attempt to access beyond end of device [ 437.430571][T11099] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 437.531036][T11099] Buffer I/O error on dev loop4, logical block 57847, async page read [ 437.556425][T11099] syz.4.1745: attempt to access beyond end of device [ 437.556425][T11099] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 437.623377][T11099] Buffer I/O error on dev loop4, logical block 57847, async page read [ 437.658674][ T27] audit: type=1800 audit(1752898400.007:985): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1745" name="file2" dev="loop4" ino=1048606 res=0 errno=0 [ 437.672136][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.666144][T11126] netlink: 'syz.4.1751': attribute type 39 has an invalid length. [ 438.908724][ T27] audit: type=1326 audit(1752898401.257:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 439.553589][ T27] audit: type=1326 audit(1752898401.287:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 440.090939][ T27] audit: type=1326 audit(1752898401.287:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 440.372229][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.990774][T11142] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 442.112048][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.305486][T11150] loop2: detected capacity change from 0 to 8192 [ 442.355394][T11150] syz.2.1761: attempt to access beyond end of device [ 442.355394][T11150] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 442.385038][T11150] Buffer I/O error on dev loop2, logical block 57847, async page read [ 442.407262][T11150] syz.2.1761: attempt to access beyond end of device [ 442.407262][T11150] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 442.435356][T11155] netlink: 'syz.4.1764': attribute type 39 has an invalid length. [ 442.450958][T11150] Buffer I/O error on dev loop2, logical block 57847, async page read [ 442.475845][ T27] audit: type=1800 audit(1752898404.807:989): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1761" name="file2" dev="loop2" ino=1048607 res=0 errno=0 [ 447.381803][T11203] loop4: detected capacity change from 0 to 1024 [ 447.466615][T11203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.535692][T11203] 9pnet_fd: Insufficient options for proto=fd [ 447.647779][T11215] smc: net device bond0 applied user defined pnetid SYZ0 [ 447.671528][T11215] smc: net device bond0 erased user defined pnetid SYZ0 [ 447.672542][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.776783][T11221] loop0: detected capacity change from 0 to 512 [ 447.822141][T11221] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 447.860305][T11221] EXT4-fs (loop0): 1 truncate cleaned up [ 447.876336][T11227] loop3: detected capacity change from 0 to 512 [ 447.882103][T11228] syz.2.1789[11228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.888771][T11228] syz.2.1789[11228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.890797][T11227] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.901848][T11221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.948231][T11227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 447.971228][T11227] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.042084][ T27] audit: type=1800 audit(1752898410.387:990): pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1785" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 448.100956][T11227] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 448.126771][T11227] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 448.139855][T11227] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1788: Failed to acquire dquot type 0 [ 448.843638][ T27] audit: type=1326 audit(1752898411.177:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 448.954119][ T27] audit: type=1326 audit(1752898411.177:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.056572][ T27] audit: type=1326 audit(1752898411.177:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.153506][ T27] audit: type=1326 audit(1752898411.177:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.254079][ T27] audit: type=1326 audit(1752898411.177:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.348214][ T27] audit: type=1326 audit(1752898411.197:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.441153][ T27] audit: type=1326 audit(1752898411.197:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 449.524117][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 450.126293][T11254] loop2: detected capacity change from 0 to 512 [ 450.253983][T11254] EXT4-fs (loop2): orphan cleanup on readonly fs [ 450.272080][T11254] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1799: bad orphan inode 13 [ 450.334607][T11254] ext4_test_bit(bit=12, block=18) = 1 [ 450.362449][T11254] is_bad_inode(inode)=0 [ 450.366653][T11254] NEXT_ORPHAN(inode)=2130706432 [ 450.371586][T11254] max_ino=32 [ 450.374809][T11254] i_nlink=1 [ 450.379354][T11254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.385039][T11257] loop4: detected capacity change from 0 to 1024 [ 450.419872][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.430998][T11257] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 450.499876][T11257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.607030][T11268] loop2: detected capacity change from 0 to 512 [ 450.618659][T11266] loop3: detected capacity change from 0 to 128 [ 450.625321][T11268] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 450.661830][T11268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 450.672593][T11268] System zones: 1-12 [ 450.677184][T11268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 450.702029][T11268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1803: bg 0: block 361: padding at end of block bitmap is not set [ 450.734715][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.777251][T11268] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 450.800662][T11268] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1803: attempt to clear invalid blocks 33619980 len 1 [ 450.858941][T11268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1803: invalid indirect mapped block 1811939328 (level 0) [ 450.900121][T11268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1803: invalid indirect mapped block 2 (level 2) [ 450.933112][T11268] EXT4-fs (loop2): 1 truncate cleaned up [ 450.940016][T11268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 451.120642][T11273] lo speed is unknown, defaulting to 1000 [ 451.869634][T11268] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 451.972691][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 453.781803][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.973208][ T5860] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 455.065077][T11293] loop3: detected capacity change from 0 to 8192 [ 455.145773][T11304] nfs4: Bad value for 'source' [ 455.806265][T11315] tipc: Enabled bearer , priority 0 [ 455.860597][T11312] tipc: Resetting bearer [ 459.285494][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.296062][ T5860] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 459.324605][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 459.340775][ T5860] usb 4-1: chopping to 0 config(s) [ 459.345943][ T5860] usb 4-1: can't read configurations, error -32 [ 459.521599][ T5860] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 459.695598][ T5860] usb 4-1: device descriptor read/64, error -32 [ 459.732247][T11339] loop2: detected capacity change from 0 to 8192 [ 459.788415][T11339] syz.2.1829: attempt to access beyond end of device [ 459.788415][T11339] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 459.811059][T11339] Buffer I/O error on dev loop2, logical block 57847, async page read [ 459.837572][ T5860] usb usb4-port1: attempt power cycle [ 459.847138][T11339] syz.2.1829: attempt to access beyond end of device [ 459.847138][T11339] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 459.890467][T11339] Buffer I/O error on dev loop2, logical block 57847, async page read [ 459.915539][ T27] kauditd_printk_skb: 227 callbacks suppressed [ 459.915553][ T27] audit: type=1800 audit(1752898422.267:1225): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1829" name="file2" dev="loop2" ino=1048608 res=0 errno=0 [ 461.832946][T11312] tipc: Disabling bearer [ 461.842582][T11324] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1823'. [ 461.859216][T11356] lo speed is unknown, defaulting to 1000 [ 462.224125][ T27] audit: type=1326 audit(1752898424.577:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.244781][T11371] loop4: detected capacity change from 0 to 128 [ 462.289520][ T27] audit: type=1326 audit(1752898424.577:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.370867][ T27] audit: type=1326 audit(1752898424.577:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.451619][T11378] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 462.481991][ T27] audit: type=1326 audit(1752898424.577:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.506457][T11378] FAT-fs (loop4): Filesystem has been set read-only [ 462.521340][T11378] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 462.532247][T11378] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 462.539705][T11378] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 462.548335][ T27] audit: type=1326 audit(1752898424.617:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.675773][ T27] audit: type=1326 audit(1752898424.617:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.696649][T11378] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 462.706401][T11378] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 462.714725][T11378] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 462.724276][T11378] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 462.731831][T11378] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 462.739418][T11378] FAT-fs (loop4): error, clusters badly computed (11 != 10) [ 462.747591][ T27] audit: type=1326 audit(1752898424.617:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 462.796494][T11378] FAT-fs (loop4): error, clusters badly computed (12 != 11) [ 462.804809][ T27] audit: type=1326 audit(1752898424.617:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feae2b8d310 code=0x7ffc0000 [ 463.166397][T11390] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1846'. [ 463.226253][T11378] FAT-fs (loop4): error, clusters badly computed (13 != 12) [ 463.299163][ T27] audit: type=1326 audit(1752898424.617:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 463.384916][T11391] atomic_op ffff88807bf2d998 conn xmit_atomic 0000000000000000 [ 463.426887][T11378] syz.4.1842: attempt to access beyond end of device [ 463.426887][T11378] loop4: rw=2049, sector=145, nr_sectors = 56 limit=128 [ 463.687252][T11392] loop2: detected capacity change from 0 to 8192 [ 463.868104][T11392] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 464.535056][T11392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.298969][T11411] loop4: detected capacity change from 0 to 512 [ 465.327039][T11411] EXT4-fs: Ignoring removed nobh option [ 465.370267][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1856: corrupted inode contents [ 465.388490][T11411] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #3: comm syz.4.1856: mark_inode_dirty error [ 465.522449][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1856: corrupted inode contents [ 465.679071][T11411] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1856: mark_inode_dirty error [ 465.879995][T11411] __quota_error: 52 callbacks suppressed [ 465.880148][T11411] Quota error (device loop4): write_blk: dquota write failed [ 465.962536][T11420] loop3: detected capacity change from 0 to 256 [ 466.085833][T11411] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 466.135210][T11411] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1856: Failed to acquire dquot type 0 [ 466.204493][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1856: corrupted inode contents [ 466.268890][T11411] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.1856: mark_inode_dirty error [ 466.283676][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1856: corrupted inode contents [ 466.329210][T11411] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1856: mark_inode_dirty error [ 466.346332][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1856: corrupted inode contents [ 466.394291][T11411] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 466.422710][T11427] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1861'. [ 466.432355][T11411] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1856: corrupted inode contents [ 466.449277][T11411] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.1856: mark_inode_dirty error [ 466.461355][T11411] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 466.492409][T11411] EXT4-fs (loop4): 1 truncate cleaned up [ 466.499374][T11411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.514513][T11411] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.821838][T11445] loop3: detected capacity change from 0 to 512 [ 466.829668][T11445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 467.032681][T11448] lo speed is unknown, defaulting to 1000 [ 467.646278][T11445] EXT4-fs (loop3): 1 truncate cleaned up [ 467.674653][T11445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.804853][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.878135][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.046554][T11460] loop2: detected capacity change from 0 to 8192 [ 468.075277][T11460] syz.2.1874: attempt to access beyond end of device [ 468.075277][T11460] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 468.096694][T11460] Buffer I/O error on dev loop2, logical block 57847, async page read [ 468.109038][T11460] syz.2.1874: attempt to access beyond end of device [ 468.109038][T11460] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 468.128271][T11460] Buffer I/O error on dev loop2, logical block 57847, async page read [ 468.152418][ T27] audit: type=1800 audit(1752898430.507:1287): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1874" name="file2" dev="loop2" ino=1048611 res=0 errno=0 [ 468.436839][T11479] loop3: detected capacity change from 0 to 512 [ 468.444823][T11479] EXT4-fs: Ignoring removed nobh option [ 468.495049][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1881: corrupted inode contents [ 468.507893][T11479] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.1881: mark_inode_dirty error [ 468.528348][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.1881: corrupted inode contents [ 468.560583][T11479] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1881: mark_inode_dirty error [ 468.578762][T11479] Quota error (device loop3): write_blk: dquota write failed [ 468.586349][T11479] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 468.596412][T11479] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1881: Failed to acquire dquot type 0 [ 468.612570][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.1881: corrupted inode contents [ 468.629859][T11479] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.1881: mark_inode_dirty error [ 468.645902][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.1881: corrupted inode contents [ 468.659081][T11479] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1881: mark_inode_dirty error [ 468.675267][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.1881: corrupted inode contents [ 468.687849][T11479] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 468.700617][T11479] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.1881: corrupted inode contents [ 468.726508][T11479] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.1881: mark_inode_dirty error [ 468.738653][T11479] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 468.753256][T11479] EXT4-fs (loop3): 1 truncate cleaned up [ 468.760391][T11479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.777946][T11479] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.999709][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.148602][T11497] loop3: detected capacity change from 0 to 8192 [ 469.169221][T11497] syz.3.1888: attempt to access beyond end of device [ 469.169221][T11497] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 469.186191][T11497] Buffer I/O error on dev loop3, logical block 57847, async page read [ 469.195744][T11497] syz.3.1888: attempt to access beyond end of device [ 469.195744][T11497] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 469.213387][T11497] Buffer I/O error on dev loop3, logical block 57847, async page read [ 469.223961][ T27] audit: type=1800 audit(1752898431.577:1288): pid=11497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1888" name="file2" dev="loop3" ino=1048612 res=0 errno=0 [ 469.302495][T11481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.311948][T11481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 469.315564][T11505] loop0: detected capacity change from 0 to 512 [ 469.328274][T11505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.405885][T11481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.420972][T11481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 469.436059][T11481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.456761][T11481] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 469.471949][T11481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.483196][T11481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 469.500210][T11505] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 469.521498][T11505] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1892: invalid indirect mapped block 2683928664 (level 1) [ 469.556501][T11481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 469.562737][T11505] EXT4-fs (loop0): Remounting filesystem read-only [ 469.569641][T11505] EXT4-fs (loop0): 1 truncate cleaned up [ 469.577820][T11505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.676722][T11513] lo speed is unknown, defaulting to 1000 [ 469.784543][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.882139][T11518] loop2: detected capacity change from 0 to 512 [ 469.896230][T11518] EXT4-fs: Ignoring removed nobh option [ 469.923417][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1897: corrupted inode contents [ 469.942388][T11518] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.1897: mark_inode_dirty error [ 469.988336][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.1897: corrupted inode contents [ 470.018655][T11518] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1897: mark_inode_dirty error [ 470.034679][T11518] Quota error (device loop2): write_blk: dquota write failed [ 470.057350][T11518] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 470.084067][T11518] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1897: Failed to acquire dquot type 0 [ 470.103661][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1897: corrupted inode contents [ 470.118512][T11518] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.1897: mark_inode_dirty error [ 470.144563][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1897: corrupted inode contents [ 470.321783][T11518] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1897: mark_inode_dirty error [ 470.365583][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1897: corrupted inode contents [ 470.513582][T11518] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 470.635091][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 470.665574][T11518] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.1897: corrupted inode contents [ 470.810558][T11518] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.1897: mark_inode_dirty error [ 470.831955][T11518] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 470.842264][T11518] EXT4-fs (loop2): 1 truncate cleaned up [ 470.850152][T11518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.862868][T11518] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.273839][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.440906][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 471.510987][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.517513][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 472.247426][T11545] 9pnet_fd: Insufficient options for proto=fd [ 473.659556][T11558] lo speed is unknown, defaulting to 1000 [ 474.398149][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 474.404272][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 474.410417][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 474.416568][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.951263][ T5906] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 476.471025][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.581394][ T27] audit: type=1326 audit(1752898438.937:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 476.606044][T11586] loop0: detected capacity change from 0 to 2048 [ 476.650853][ T27] audit: type=1326 audit(1752898438.937:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 476.696637][T11586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.714867][ T27] audit: type=1326 audit(1752898438.937:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 476.740964][ T27] audit: type=1326 audit(1752898438.937:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 476.766104][ T27] audit: type=1326 audit(1752898438.937:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aff8e9a9 code=0x7ffc0000 [ 476.798895][ T27] audit: type=1800 audit(1752898439.147:1294): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1918" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 476.807651][T11589] loop2: detected capacity change from 0 to 8192 [ 476.846338][T11589] syz.2.1919: attempt to access beyond end of device [ 476.846338][T11589] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 476.866985][T11589] Buffer I/O error on dev loop2, logical block 57847, async page read [ 476.876196][T11589] syz.2.1919: attempt to access beyond end of device [ 476.876196][T11589] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 476.893859][T11589] Buffer I/O error on dev loop2, logical block 57847, async page read [ 476.903611][ T27] audit: type=1800 audit(1752898439.257:1295): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1919" name="file2" dev="loop2" ino=1048613 res=0 errno=0 [ 476.958749][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.075096][ T27] audit: type=1326 audit(1752898439.427:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 477.135303][ T27] audit: type=1326 audit(1752898439.427:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 477.176850][ T27] audit: type=1326 audit(1752898439.427:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 477.462772][T11607] sd 0:0:1:0: device reset [ 478.792840][T11624] program syz.0.1932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.396620][T11625] 9pnet_fd: Insufficient options for proto=fd [ 479.724001][T11630] lo speed is unknown, defaulting to 1000 [ 480.395716][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 480.420814][ T5906] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 480.449532][ T5906] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 480.459723][ T5906] usb 4-1: chopping to 0 config(s) [ 480.464953][ T5906] usb 4-1: can't read configurations, error -32 [ 480.744098][ T5906] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 480.900815][ T5906] usb 4-1: device descriptor read/64, error -32 [ 481.031057][ T5906] usb usb4-port1: attempt power cycle [ 481.460889][ T5906] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 481.501117][ T5906] usb 4-1: device descriptor read/8, error -32 [ 483.077861][T11669] loop4: detected capacity change from 0 to 512 [ 483.086405][T11669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 483.107562][T11669] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 483.118400][T11669] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1947: invalid indirect mapped block 2683928664 (level 1) [ 483.621936][T11669] EXT4-fs (loop4): Remounting filesystem read-only [ 483.628956][T11669] EXT4-fs (loop4): 1 truncate cleaned up [ 483.642141][T11669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.788532][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.987141][T11684] netlink: 'syz.4.1949': attribute type 39 has an invalid length. [ 484.127263][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 484.127277][ T27] audit: type=1326 audit(1752898446.477:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.168515][T11659] loop2: detected capacity change from 0 to 256 [ 484.203603][ T27] audit: type=1326 audit(1752898446.517:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.236545][T11659] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 484.236545][T11659] program syz.2.1943 not setting count and/or reply_len properly [ 484.275345][ T27] audit: type=1326 audit(1752898446.517:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.317409][ T27] audit: type=1326 audit(1752898446.517:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.391108][ T27] audit: type=1326 audit(1752898446.517:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.418250][T11701] syz.4.1956[11701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.418380][T11701] syz.4.1956[11701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.446307][ T27] audit: type=1326 audit(1752898446.517:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.512989][ T27] audit: type=1326 audit(1752898446.517:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.553723][ T27] audit: type=1326 audit(1752898446.517:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.607426][ T27] audit: type=1326 audit(1752898446.517:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.644948][ T27] audit: type=1326 audit(1752898446.517:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 484.985268][T11715] atomic_op ffff8880777c3998 conn xmit_atomic 0000000000000000 [ 485.434300][T11731] sd 0:0:1:0: device reset [ 485.777113][T11739] loop3: detected capacity change from 0 to 512 [ 485.839199][T11739] EXT4-fs: Ignoring removed mblk_io_submit option [ 485.846782][T11744] loop0: detected capacity change from 0 to 512 [ 485.862262][T11746] capability: warning: `syz.2.1976' uses deprecated v2 capabilities in a way that may be insecure [ 485.877270][T11739] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 485.899321][T11744] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 485.912010][T11744] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 485.935862][T11744] EXT4-fs (loop0): 1 truncate cleaned up [ 485.941100][T11739] EXT4-fs (loop3): orphan cleanup on readonly fs [ 485.943055][T11744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.980083][T11739] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 486.063395][T11739] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1973: attempt to clear invalid blocks 2 len 1 [ 486.085582][T11744] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 4: comm syz.0.1975: lblock 0 mapped to illegal pblock 4 (length 1) [ 486.125265][T11744] EXT4-fs (loop0): Remounting filesystem read-only [ 486.164163][T11739] EXT4-fs (loop3): Remounting filesystem read-only [ 486.204871][T11739] EXT4-fs (loop3): 1 truncate cleaned up [ 486.241494][T11739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.256266][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.194176][T11765] loop0: detected capacity change from 0 to 1024 [ 487.245668][T11765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.375325][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.431944][T11774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1981: bg 0: block 32: padding at end of block bitmap is not set [ 487.459690][T11773] loop4: detected capacity change from 0 to 2048 [ 487.497565][T11774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 487.520550][T11774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 487.520550][T11774] [ 487.591174][T11771] loop2: detected capacity change from 0 to 8192 [ 487.593462][T11773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.628207][T11771] syz.2.1983: attempt to access beyond end of device [ 487.628207][T11771] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 487.699454][T11771] Buffer I/O error on dev loop2, logical block 57847, async page read [ 487.753849][T11771] syz.2.1983: attempt to access beyond end of device [ 487.753849][T11771] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 487.806551][T11771] Buffer I/O error on dev loop2, logical block 57847, async page read [ 487.985027][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.107779][T10515] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 340 with max blocks 288 with error 28 [ 488.137807][T10515] EXT4-fs (loop0): This should not happen!! Data will be lost [ 488.137807][T10515] [ 488.160757][T10515] EXT4-fs (loop0): Total free blocks count 0 [ 488.166775][T10515] EXT4-fs (loop0): Free/Dirty block details [ 488.200389][T10515] EXT4-fs (loop0): free_blocks=68719476736 [ 488.210117][T10515] EXT4-fs (loop0): dirty_blocks=304 [ 488.215437][T10515] EXT4-fs (loop0): Block reservation details [ 488.219529][T11789] loop2: detected capacity change from 0 to 2048 [ 488.276179][T11789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.306083][T11789] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.388342][T11789] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1990: bg 0: block 345: padding at end of block bitmap is not set [ 488.454418][T11789] EXT4-fs (loop2): Remounting filesystem read-only [ 488.480088][T11789] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.2.1990: cleanup dec ref error -117 [ 488.534660][T11797] loop0: detected capacity change from 0 to 2048 [ 488.577818][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.599359][T11797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.696658][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.176413][T11805] sd 0:0:1:0: device reset [ 490.536659][T11812] loop4: detected capacity change from 0 to 8192 [ 490.623598][T11812] syz.4.1995: attempt to access beyond end of device [ 490.623598][T11812] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 490.718272][T11812] Buffer I/O error on dev loop4, logical block 57847, async page read [ 490.729157][T11812] syz.4.1995: attempt to access beyond end of device [ 490.729157][T11812] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 490.844088][T11812] Buffer I/O error on dev loop4, logical block 57847, async page read [ 490.915479][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 490.915495][ T27] audit: type=1800 audit(1752898453.267:1409): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1995" name="file2" dev="loop4" ino=1048616 res=0 errno=0 [ 491.420504][T11827] loop2: detected capacity change from 0 to 2048 [ 491.472113][T11827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.496793][ T27] audit: type=1800 audit(1752898453.847:1410): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2002" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 491.531207][T11834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2003'. [ 491.618776][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.115341][T11843] sd 0:0:1:0: device reset [ 492.450897][ T5860] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 493.240570][T11846] loop3: detected capacity change from 0 to 8192 [ 493.714510][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 496.106343][T11867] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 496.200958][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 496.331021][ T5860] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 496.349695][ T5860] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 496.374654][ T5860] usb 4-1: can't read configurations, error -71 [ 497.164084][T11883] loop0: detected capacity change from 0 to 1024 [ 497.240608][T11883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.444991][T11883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2022: bg 0: block 32: padding at end of block bitmap is not set [ 498.775090][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.008193][T11916] loop2: detected capacity change from 0 to 2048 [ 499.046688][T11916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.113572][ T27] audit: type=1800 audit(1752898461.467:1411): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2034" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 499.285302][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.014538][T11942] loop3: detected capacity change from 0 to 128 [ 501.038092][T11940] loop4: detected capacity change from 0 to 2048 [ 501.054069][ T27] audit: type=1800 audit(1752898463.407:1412): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2044" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 501.114932][T11940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.163932][ T27] audit: type=1800 audit(1752898463.517:1413): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2043" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 501.286590][T11949] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2046'. [ 501.347366][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.756921][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.468578][T11961] loop3: detected capacity change from 0 to 8192 [ 502.495792][T11961] syz.3.2050: attempt to access beyond end of device [ 502.495792][T11961] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 502.520231][T11961] Buffer I/O error on dev loop3, logical block 57847, async page read [ 502.549463][T11961] syz.3.2050: attempt to access beyond end of device [ 502.549463][T11961] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 502.583971][T11961] Buffer I/O error on dev loop3, logical block 57847, async page read [ 502.621192][ T27] audit: type=1800 audit(1752898464.977:1414): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2050" name="file2" dev="loop3" ino=1048618 res=0 errno=0 [ 502.657438][T11968] loop4: detected capacity change from 0 to 2048 [ 502.709956][T11968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.768101][ T27] audit: type=1800 audit(1752898465.117:1415): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2056" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 502.994172][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.089784][T11979] loop0: detected capacity change from 0 to 512 [ 503.137954][T11979] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 503.163217][ T27] audit: type=1326 audit(1752898465.517:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 503.167689][T11979] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 503.239636][ T27] audit: type=1326 audit(1752898465.517:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 503.293281][T11979] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2054: Failed to acquire dquot type 1 [ 503.328521][ T27] audit: type=1326 audit(1752898465.517:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae2b8e9a9 code=0x7ffc0000 [ 503.364257][T11979] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2054: corrupted inode contents [ 503.399635][T11979] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.2054: mark_inode_dirty error [ 503.425757][T11979] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2054: corrupted inode contents [ 503.451228][T11979] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2054: mark_inode_dirty error [ 503.466339][T11979] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2054: corrupted inode contents [ 503.500792][T11979] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 503.531193][T11979] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2054: corrupted inode contents [ 503.580750][T11979] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.2054: mark_inode_dirty error [ 503.590395][T11987] loop2: detected capacity change from 0 to 8192 [ 503.609087][T11979] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 503.644949][T11979] EXT4-fs (loop0): 1 truncate cleaned up [ 503.664330][T11979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.678269][T11979] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.903944][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.268750][T11999] loop3: detected capacity change from 0 to 512 [ 504.471306][T11999] __quota_error: 11 callbacks suppressed [ 504.471350][T11999] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 504.488053][T11999] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 504.498273][T11999] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2065: Failed to acquire dquot type 1 [ 504.522619][T11999] EXT4-fs (loop3): 1 truncate cleaned up [ 504.534825][T11999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.547925][T11999] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.623815][ T27] audit: type=1326 audit(1752898466.977:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.708473][ T27] audit: type=1326 audit(1752898466.977:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.806289][ T27] audit: type=1326 audit(1752898467.007:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.817749][T12006] loop0: detected capacity change from 0 to 512 [ 504.864307][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.877112][ T27] audit: type=1326 audit(1752898467.007:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.921724][ T27] audit: type=1326 audit(1752898467.007:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.944941][ T27] audit: type=1326 audit(1752898467.007:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12000 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 504.969872][T12006] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 504.979878][T12006] EXT4-fs (loop0): orphan cleanup on readonly fs [ 505.001312][T12006] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2067: corrupted inode contents [ 505.060949][T12006] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.2067: mark_inode_dirty error [ 505.103794][T12006] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2067: corrupted inode contents [ 505.142227][T12006] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2067: mark_inode_dirty error [ 505.181200][T12006] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2067: corrupted inode contents [ 505.221855][T12006] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 505.243723][T12006] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2067: corrupted inode contents [ 505.262264][T12006] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.2067: mark_inode_dirty error [ 505.295717][T12006] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 505.311332][T12006] EXT4-fs (loop0): 1 truncate cleaned up [ 505.371462][T10540] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 505.390900][T10540] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:51: Failed to release dquot type 1 [ 505.445367][T12006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.537421][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.574719][T12023] loop3: detected capacity change from 0 to 8192 [ 505.890778][ T5860] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 506.452015][T12025] loop2: detected capacity change from 0 to 8192 [ 507.852488][T12047] syz.3.2083[12047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.852634][T12047] syz.3.2083[12047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.930989][T12049] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 508.191886][T12049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.199450][T12047] smc: net device bond0 applied user defined pnetid SYZ0 [ 508.220471][T12051] smc: net device bond0 erased user defined pnetid SYZ0 [ 508.945278][T12052] bond1 (unregistering): Released all slaves [ 509.018054][T12063] loop3: detected capacity change from 0 to 2048 [ 509.092059][T12063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.147108][T12063] @: renamed from vlan0 (while UP) [ 509.237953][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.572973][T12074] loop3: detected capacity change from 0 to 1024 [ 509.623047][T12074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.738278][T12077] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2092: bg 0: block 32: padding at end of block bitmap is not set [ 509.768120][T12077] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 509.850852][T12077] EXT4-fs (loop3): This should not happen!! Data will be lost [ 509.850852][T12077] [ 509.942473][T12077] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 296 with max blocks 32 with error 28 [ 509.972259][T12077] EXT4-fs (loop3): This should not happen!! Data will be lost [ 509.972259][T12077] [ 509.990882][T12077] EXT4-fs (loop3): Total free blocks count 0 [ 510.007156][T12077] EXT4-fs (loop3): Free/Dirty block details [ 510.020813][T12077] EXT4-fs (loop3): free_blocks=68719476736 [ 510.030808][T12077] EXT4-fs (loop3): dirty_blocks=48 [ 510.040859][T12077] EXT4-fs (loop3): Block reservation details [ 510.704653][T12087] netlink: 'syz.3.2095': attribute type 39 has an invalid length. [ 511.023064][ T27] audit: type=1326 audit(1752898473.357:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 511.094397][ T27] audit: type=1326 audit(1752898473.367:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.0.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 511.131129][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 511.141362][ T5860] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 511.169211][ T5860] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 511.190745][ T5860] usb 3-1: chopping to 0 config(s) [ 511.195926][ T5860] usb 3-1: can't read configurations, error -32 [ 511.370922][ T5860] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 512.202957][T12104] loop3: detected capacity change from 0 to 2048 [ 512.242736][ T5860] usb 3-1: device descriptor read/64, error -32 [ 512.255835][T12104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.281004][T12104] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.316308][T12104] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2104: bg 0: block 345: padding at end of block bitmap is not set [ 512.333297][T12104] EXT4-fs (loop3): Remounting filesystem read-only [ 512.353024][T12104] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.3.2104: cleanup dec ref error -117 [ 512.369095][ T5860] usb usb3-port1: attempt power cycle [ 512.455706][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.947490][T12117] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2098'. [ 513.408877][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 514.283559][T12133] loop0: detected capacity change from 0 to 2048 [ 514.349974][T12133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.430848][ T27] audit: type=1800 audit(1752898476.777:1438): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2112" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 514.742558][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.760458][T12142] loop2: detected capacity change from 0 to 8192 [ 514.887702][T12142] syz.2.2115: attempt to access beyond end of device [ 514.887702][T12142] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 514.941048][T12142] Buffer I/O error on dev loop2, logical block 57847, async page read [ 514.995891][T12142] syz.2.2115: attempt to access beyond end of device [ 514.995891][T12142] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 515.012271][T12149] loop4: detected capacity change from 0 to 512 [ 515.041368][T12142] Buffer I/O error on dev loop2, logical block 57847, async page read [ 515.051341][T12149] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 515.059634][T12149] EXT4-fs (loop4): orphan cleanup on readonly fs [ 515.075333][T12151] loop0: detected capacity change from 0 to 2048 [ 515.083358][ T27] audit: type=1800 audit(1752898477.427:1439): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2115" name="file2" dev="loop2" ino=1048621 res=0 errno=0 [ 515.102515][T12149] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2118: corrupted inode contents [ 515.156710][T12151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.172867][T12149] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.2118: mark_inode_dirty error [ 515.209706][T12151] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.236333][T12149] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2118: corrupted inode contents [ 515.259139][T12151] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2119: bg 0: block 345: padding at end of block bitmap is not set [ 515.269768][T12149] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2118: mark_inode_dirty error [ 515.281105][T12151] EXT4-fs (loop0): Remounting filesystem read-only [ 515.297592][T12151] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.0.2119: cleanup dec ref error -117 [ 515.312191][T12149] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2118: corrupted inode contents [ 515.334772][T12149] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 515.361323][T12149] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2118: corrupted inode contents [ 515.382711][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.401883][T12149] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.2118: mark_inode_dirty error [ 515.451278][T12149] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 515.471200][T12149] EXT4-fs (loop4): 1 truncate cleaned up [ 515.481967][T10523] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 515.498930][T10523] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:27: Failed to release dquot type 1 [ 515.519043][T12149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.569929][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.919480][T12166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2124'. [ 516.908978][T12174] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2125'. [ 517.659440][T12183] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 517.686085][T12178] loop0: detected capacity change from 0 to 8192 [ 517.747284][T12185] loop4: detected capacity change from 0 to 512 [ 517.785302][T12178] syz.0.2128: attempt to access beyond end of device [ 517.785302][T12178] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 517.831819][T12185] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 517.840171][T12185] EXT4-fs (loop4): orphan cleanup on readonly fs [ 517.871898][T12178] Buffer I/O error on dev loop0, logical block 57847, async page read [ 517.905564][T12185] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2131: corrupted inode contents [ 517.921281][T12178] syz.0.2128: attempt to access beyond end of device [ 517.921281][T12178] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 518.143345][T12178] Buffer I/O error on dev loop0, logical block 57847, async page read [ 518.151884][T12185] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.2131: mark_inode_dirty error [ 518.181214][ T27] audit: type=1800 audit(1752898480.537:1440): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2128" name="file2" dev="loop0" ino=1048622 res=0 errno=0 [ 518.979496][T12192] lo speed is unknown, defaulting to 1000 [ 519.472813][T12185] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2131: corrupted inode contents [ 519.495359][T12185] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2131: mark_inode_dirty error [ 519.517305][T12185] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2131: corrupted inode contents [ 519.536443][T12196] loop2: detected capacity change from 0 to 128 [ 519.563152][T12185] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 519.593536][T12185] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2131: corrupted inode contents [ 519.606568][T12185] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.2131: mark_inode_dirty error [ 519.633572][T12185] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 519.656272][T12185] EXT4-fs (loop4): 1 truncate cleaned up [ 519.671860][T10542] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 519.697768][T10542] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:53: Failed to release dquot type 1 [ 519.721896][T12185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.982588][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.783992][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 520.800952][T12209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.818731][T12209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.850524][T12209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.868398][T12209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.952982][T12213] loop2: detected capacity change from 0 to 2048 [ 521.035933][T12213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.071372][T12213] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.141761][T12213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2140: bg 0: block 345: padding at end of block bitmap is not set [ 521.213882][T12213] EXT4-fs (loop2): Remounting filesystem read-only [ 521.220824][T12213] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.2.2140: cleanup dec ref error -117 [ 521.621265][T12222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2141'. [ 521.872659][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.079835][T12227] loop0: detected capacity change from 0 to 512 [ 522.162174][T12227] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 522.183668][T12227] EXT4-fs (loop0): orphan cleanup on readonly fs [ 522.220579][T12227] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2145: corrupted inode contents [ 522.281888][T12227] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.2145: mark_inode_dirty error [ 522.316004][T12227] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2145: corrupted inode contents [ 522.370377][T12227] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2145: mark_inode_dirty error [ 522.405986][T12227] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2145: corrupted inode contents [ 522.447688][T12227] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 522.488049][T12227] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.2145: corrupted inode contents [ 522.527247][T12227] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.2145: mark_inode_dirty error [ 522.569439][T12227] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 522.613517][T12227] EXT4-fs (loop0): 1 truncate cleaned up [ 523.151157][T10515] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 523.827288][T10515] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:19: Failed to release dquot type 1 [ 523.870597][T12227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.019125][T12248] program syz.4.2152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.029969][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.053510][T12248] 9pnet_fd: Insufficient options for proto=fd [ 524.391966][T12266] tipc: Enabling of bearer rejected, failed to enable media [ 524.467712][T12270] loop4: detected capacity change from 0 to 512 [ 524.517670][T12270] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 524.539656][T12276] program syz.3.2165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.541970][T12270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.557529][T12276] 9pnet_fd: Insufficient options for proto=fd [ 524.595597][T12270] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2163: corrupted inode contents [ 524.613362][T12270] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.2163: mark_inode_dirty error [ 524.653328][T12270] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2163: corrupted inode contents [ 524.677071][T12270] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2163: mark_inode_dirty error [ 524.710566][T12270] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2163: corrupted inode contents [ 524.751158][T12270] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 524.770821][T12270] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2163: corrupted inode contents [ 524.807337][T12270] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.2163: mark_inode_dirty error [ 524.822354][T12288] xt_hashlimit: max too large, truncated to 1048576 [ 524.842929][T12270] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 524.865438][T12270] EXT4-fs (loop4): 1 truncate cleaned up [ 524.888864][T10542] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 524.919496][T10542] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:53: Failed to release dquot type 1 [ 524.953417][T12270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.988875][T12295] netlink: 'syz.3.2173': attribute type 39 has an invalid length. [ 525.065738][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.094605][ T27] audit: type=1326 audit(1752898487.447:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 525.152264][T12299] program syz.0.2176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.161751][ T27] audit: type=1326 audit(1752898487.477:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 525.219075][ T27] audit: type=1326 audit(1752898487.477:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12296 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c9f8e9a9 code=0x7ffc0000 [ 525.432036][T12299] 9pnet_fd: Insufficient options for proto=fd [ 527.531424][T12322] can0: slcan on ttyS3. [ 527.547581][T12327] netlink: 'syz.2.2186': attribute type 39 has an invalid length. [ 527.551360][T12326] loop4: detected capacity change from 0 to 512 [ 527.593020][T12321] can0 (unregistered): slcan off ttyS3. [ 527.862378][T12326] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 527.987050][T12326] EXT4-fs (loop4): orphan cleanup on readonly fs [ 528.191389][T12326] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2185: corrupted inode contents [ 528.247204][T12326] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.2185: mark_inode_dirty error [ 528.292359][T12326] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2185: corrupted inode contents [ 528.310761][T12326] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2185: mark_inode_dirty error [ 528.325587][T12326] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2185: corrupted inode contents [ 528.350800][T12326] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 528.385173][T12326] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2185: corrupted inode contents [ 528.407809][T12326] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.2185: mark_inode_dirty error [ 528.431745][T12326] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 528.453713][T12326] EXT4-fs (loop4): 1 truncate cleaned up [ 528.475900][T10515] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 528.487872][T12339] program syz.2.2190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.506970][T10515] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:19: Failed to release dquot type 1 [ 528.522274][T12326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.552767][T12339] 9pnet_fd: Insufficient options for proto=fd [ 528.645100][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.706710][ T27] audit: type=1326 audit(1752898491.057:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12349 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 528.758818][ T27] audit: type=1326 audit(1752898491.057:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12349 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 528.799748][ T27] audit: type=1326 audit(1752898491.087:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12349 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 528.895554][ T27] audit: type=1326 audit(1752898491.087:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12349 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 528.961816][T12359] netlink: 'syz.4.2197': attribute type 39 has an invalid length. [ 529.357656][ T27] audit: type=1326 audit(1752898491.087:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12349 comm="syz.0.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2d18e9a9 code=0x7ffc0000 [ 530.853888][T12393] loop3: detected capacity change from 0 to 512 [ 530.965130][T12393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.204874][T12393] EXT4-fs (loop3): 1 truncate cleaned up [ 531.328435][T12393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.696912][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.466030][ T787] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 533.473866][ T787] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 533.481346][ T787] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 533.493057][ T787] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 533.555605][T12428] loop4: detected capacity change from 0 to 512 [ 533.605701][T12428] __quota_error: 7 callbacks suppressed [ 533.605717][T12428] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 533.621857][T12428] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 533.631946][T12428] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2225: Failed to acquire dquot type 1 [ 533.651924][T12428] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2225: corrupted inode contents [ 533.672581][T12428] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.2225: mark_inode_dirty error [ 533.685395][T12428] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2225: corrupted inode contents [ 533.700769][T12428] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2225: mark_inode_dirty error [ 533.717795][T12428] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2225: corrupted inode contents [ 533.745137][T12428] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 533.768633][T12428] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.2225: corrupted inode contents [ 533.785452][T12430] syz!: rxe_newlink: already configured on team_slave_0 [ 533.789234][T12428] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.2225: mark_inode_dirty error [ 533.810198][T12428] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 533.845375][T12428] EXT4-fs (loop4): 1 truncate cleaned up [ 533.854571][T12428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.869727][T12428] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.913026][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.985411][T12443] netlink: 'syz.4.2231': attribute type 39 has an invalid length. [ 534.056922][T12450] program syz.2.2233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.063555][T12449] loop4: detected capacity change from 0 to 1024 [ 534.080030][T12450] 9pnet_fd: Insufficient options for proto=fd [ 534.093293][T12449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.228811][T12449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2234: bg 0: block 32: padding at end of block bitmap is not set [ 534.425433][T12462] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.432589][ T787] IPVS: starting estimator thread 0... [ 534.520967][T12466] IPVS: using max 17 ests per chain, 40800 per kthread [ 534.863005][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'. [ 534.880892][T12475] netem: change failed [ 534.970351][T12477] program syz.0.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.048052][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.284272][ T5787] syz_tun (unregistering): left allmulticast mode [ 535.317240][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.328425][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.347127][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.361973][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.380355][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.389390][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.433810][T10532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.504339][T12485] lo speed is unknown, defaulting to 1000 [ 535.598110][T10532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.648952][T12499] program syz.2.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.672308][T12495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.707111][T10532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.772541][T12495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.836280][T10532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.886550][T12495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.981905][T12495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.004405][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 536.124884][T12495] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.149621][T12495] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.169730][T12495] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.217599][T12495] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.228021][T10532] tipc: Disabling bearer [ 536.236798][T10532] tipc: Left network mode [ 536.365514][T12485] chnl_net:caif_netlink_parms(): no params data found [ 536.440580][T12518] loop4: detected capacity change from 0 to 512 [ 536.448683][T12518] EXT4-fs: Ignoring removed i_version option [ 536.455654][T12518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.474186][T12518] EXT4-fs (loop4): 1 truncate cleaned up [ 536.482552][T12518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.516681][T12518] [ 536.519051][T12518] ====================================================== [ 536.526071][T12518] WARNING: possible circular locking dependency detected [ 536.533125][T12518] 6.6.99-syzkaller #0 Not tainted [ 536.538150][T12518] ------------------------------------------------------ [ 536.545190][T12518] syz.4.2258/12518 is trying to acquire lock: [ 536.551288][T12518] ffff88805b048410 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 536.563173][T12518] [ 536.563173][T12518] but task is already holding lock: [ 536.570539][T12518] ffff88805b04a088 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 536.579892][T12518] [ 536.579892][T12518] which lock already depends on the new lock. [ 536.579892][T12518] [ 536.590320][T12518] [ 536.590320][T12518] the existing dependency chain (in reverse order) is: [ 536.599344][T12518] [ 536.599344][T12518] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 536.607210][T12518] down_write+0x97/0x1f0 [ 536.612010][T12518] ext4_xattr_inode_lookup_create+0x15fe/0x1d80 [ 536.618797][T12518] ext4_xattr_ibody_set+0x202/0x6a0 [ 536.624539][T12518] ext4_xattr_set_handle+0xaad/0x1290 [ 536.630452][T12518] ext4_xattr_set+0x22d/0x320 [ 536.635642][T12518] __vfs_setxattr+0x431/0x470 [ 536.640827][T12518] __vfs_setxattr_noperm+0x12d/0x5e0 [ 536.646619][T12518] vfs_setxattr+0x16c/0x2f0 [ 536.651630][T12518] path_setxattr+0x362/0x550 [ 536.656730][T12518] __x64_sys_setxattr+0xbb/0xd0 [ 536.662094][T12518] do_syscall_64+0x55/0xb0 [ 536.667022][T12518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.673442][T12518] [ 536.673442][T12518] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 536.682250][T12518] __lock_acquire+0x2ddb/0x7c80 [ 536.687642][T12518] lock_acquire+0x197/0x410 [ 536.692695][T12518] down_write+0x97/0x1f0 [ 536.697485][T12518] ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 536.704277][T12518] ext4_xattr_block_set+0x23e/0x32a0 [ 536.710107][T12518] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 536.716534][T12518] __ext4_expand_extra_isize+0x306/0x400 [ 536.722780][T12518] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 536.728757][T12518] ext4_setattr+0x1673/0x1c90 [ 536.733949][T12518] notify_change+0xb0d/0xe10 [ 536.739052][T12518] do_truncate+0x19b/0x220 [ 536.743977][T12518] path_openat+0x298c/0x3190 [ 536.749098][T12518] do_filp_open+0x1c5/0x3d0 [ 536.754113][T12518] do_sys_openat2+0x12c/0x1c0 [ 536.759299][T12518] __x64_sys_openat+0x139/0x160 [ 536.764659][T12518] do_syscall_64+0x55/0xb0 [ 536.769579][T12518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.775985][T12518] [ 536.775985][T12518] other info that might help us debug this: [ 536.775985][T12518] [ 536.786202][T12518] Possible unsafe locking scenario: [ 536.786202][T12518] [ 536.793649][T12518] CPU0 CPU1 [ 536.798995][T12518] ---- ---- [ 536.804341][T12518] lock(&ei->i_data_sem/3); [ 536.808917][T12518] lock(&sb->s_type->i_mutex_key#8/1); [ 536.816973][T12518] lock(&ei->i_data_sem/3); [ 536.824074][T12518] lock(&sb->s_type->i_mutex_key#8/1); [ 536.829607][T12518] [ 536.829607][T12518] *** DEADLOCK *** [ 536.829607][T12518] [ 536.837731][T12518] 5 locks held by syz.4.2258/12518: [ 536.842905][T12518] #0: ffff888020c50418 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x41/0x90 [ 536.852039][T12518] #1: ffff88805b04a210 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x187/0x220 [ 536.862290][T12518] #2: ffff88805b04a3a0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xef3/0x1c90 [ 536.872448][T12518] #3: ffff88805b04a088 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 536.882179][T12518] #4: ffff88805b049ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 536.892423][T12518] [ 536.892423][T12518] stack backtrace: [ 536.898303][T12518] CPU: 0 PID: 12518 Comm: syz.4.2258 Not tainted 6.6.99-syzkaller #0 [ 536.906348][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.916410][T12518] Call Trace: [ 536.919695][T12518] [ 536.922653][T12518] dump_stack_lvl+0x16c/0x230 [ 536.927332][T12518] ? load_image+0x3b0/0x3b0 [ 536.931829][T12518] ? show_regs_print_info+0x20/0x20 [ 536.937014][T12518] ? print_circular_bug+0x12b/0x1a0 [ 536.942200][T12518] check_noncircular+0x2bd/0x3c0 [ 536.947125][T12518] ? print_deadlock_bug+0x5d0/0x5d0 [ 536.952310][T12518] ? lockdep_lock+0xe0/0x220 [ 536.956888][T12518] __lock_acquire+0x2ddb/0x7c80 [ 536.961734][T12518] ? verify_lock_unused+0x140/0x140 [ 536.966923][T12518] lock_acquire+0x197/0x410 [ 536.971420][T12518] ? ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 536.977841][T12518] ? __might_sleep+0xe0/0xe0 [ 536.982517][T12518] ? read_lock_is_recursive+0x20/0x20 [ 536.987885][T12518] ? dquot_free_inode+0x871/0xa00 [ 536.992900][T12518] ? ext4_mark_iloc_dirty+0x67c/0x1ca0 [ 536.998344][T12518] down_write+0x97/0x1f0 [ 537.002573][T12518] ? ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 537.008972][T12518] ? down_read_killable+0x340/0x340 [ 537.014182][T12518] ? ext4_get_dquots+0xd/0x20 [ 537.018848][T12518] ? dquot_drop+0x135/0x160 [ 537.023365][T12518] ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 537.029617][T12518] ? mark_lock+0x94/0x320 [ 537.033931][T12518] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 537.039285][T12518] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 537.045248][T12518] ? lock_chain_count+0x20/0x20 [ 537.050084][T12518] ? ext4_xattr_block_set+0xd6/0x32a0 [ 537.055443][T12518] ext4_xattr_block_set+0x23e/0x32a0 [ 537.060720][T12518] ? __might_sleep+0xe0/0xe0 [ 537.065296][T12518] ? ext4_xattr_inode_get+0x1a9/0x310 [ 537.070654][T12518] ? __getblk_gfp+0x54/0x660 [ 537.075245][T12518] ? ext4_xattr_block_find+0x350/0x350 [ 537.080702][T12518] ? ext4_xattr_block_find+0x2d4/0x350 [ 537.086153][T12518] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 537.092042][T12518] __ext4_expand_extra_isize+0x306/0x400 [ 537.097665][T12518] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 537.103122][T12518] ext4_setattr+0x1673/0x1c90 [ 537.107798][T12518] ? ext4_write_inode+0x550/0x550 [ 537.112820][T12518] notify_change+0xb0d/0xe10 [ 537.117405][T12518] do_truncate+0x19b/0x220 [ 537.121813][T12518] ? put_page_bootmem+0x2c0/0x2c0 [ 537.126823][T12518] ? apparmor_file_truncate+0x23f/0x2d0 [ 537.132353][T12518] ? ima_bprm_check+0x1f0/0x1f0 [ 537.137371][T12518] path_openat+0x298c/0x3190 [ 537.141962][T12518] ? do_filp_open+0x3d0/0x3d0 [ 537.146633][T12518] do_filp_open+0x1c5/0x3d0 [ 537.151128][T12518] ? vfs_tmpfile+0x490/0x490 [ 537.155711][T12518] ? _raw_spin_unlock+0x28/0x40 [ 537.160550][T12518] ? alloc_fd+0x58f/0x630 [ 537.164866][T12518] do_sys_openat2+0x12c/0x1c0 [ 537.169529][T12518] ? do_sys_open+0xe0/0xe0 [ 537.173937][T12518] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 537.179903][T12518] ? lock_chain_count+0x20/0x20 [ 537.184741][T12518] __x64_sys_openat+0x139/0x160 [ 537.189583][T12518] do_syscall_64+0x55/0xb0 [ 537.193984][T12518] ? clear_bhb_loop+0x40/0x90 [ 537.198640][T12518] ? clear_bhb_loop+0x40/0x90 [ 537.203296][T12518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.209178][T12518] RIP: 0033:0x7f67aff8e9a9 [ 537.213582][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.233176][T12518] RSP: 002b:00007f67b0d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.241574][T12518] RAX: ffffffffffffffda RBX: 00007f67b01b5fa0 RCX: 00007f67aff8e9a9 [ 537.249532][T12518] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 537.257486][T12518] RBP: 00007f67b0010d69 R08: 0000000000000000 R09: 0000000000000000 [ 537.265451][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.273432][T12518] R13: 0000000000000000 R14: 00007f67b01b5fa0 R15: 00007ffeb95430d8 [ 537.281409][T12518] [ 537.327845][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.335794][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.350251][T10291] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.363017][T12485] bridge_slave_0: entered allmulticast mode [ 537.370365][T12485] bridge_slave_0: entered promiscuous mode [ 537.393411][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.402685][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.410413][T12485] bridge_slave_1: entered allmulticast mode [ 537.419112][T12485] bridge_slave_1: entered promiscuous mode [ 537.430824][ T5799] Bluetooth: hci1: command tx timeout [ 537.704164][T12537] lo speed is unknown, defaulting to 1000 [ 537.884923][T12485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.905442][T12485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.952932][T12485] team0: Port device team_slave_0 added [ 537.981860][T12485] team0: Port device team_slave_1 added [ 538.023201][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.030191][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.056572][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.072973][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.079948][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.106553][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.138732][T12485] hsr_slave_0: entered promiscuous mode [ 538.145305][T12485] hsr_slave_1: entered promiscuous mode [ 538.151520][T12485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.159068][T12485] Cannot create hsr debugfs directory [ 538.548249][T12485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.569013][T12485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.606387][T12485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.622332][T12485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.714643][T12485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.733376][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.749040][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.756153][T10518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.769108][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.776198][T10518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.787856][T10532] hsr_slave_0: left promiscuous mode [ 538.793879][T10532] hsr_slave_1: left promiscuous mode [ 538.799564][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.807342][T10532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.820493][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.827942][T10532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.835738][T10532] bridge_slave_1: left allmulticast mode [ 538.841450][T10532] bridge_slave_1: left promiscuous mode [ 538.847173][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.855971][T10532] bridge_slave_0: left allmulticast mode [ 538.861839][T10532] bridge_slave_0: left promiscuous mode [ 538.867463][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.877384][T10532] veth1_macvtap: left promiscuous mode [ 538.883100][T10532] veth0_macvtap: left promiscuous mode [ 538.888621][T10532] veth1_vlan: left promiscuous mode [ 538.894434][T10532] veth0_vlan: left promiscuous mode [ 539.040122][T10532] team0 (unregistering): Port device team_slave_1 removed [ 539.053438][T10532] team0 (unregistering): Port device team_slave_0 removed [ 539.085786][T10532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.112542][T10532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.123200][ T23] infiniband srz1: ib_query_port failed (-19) [ 539.195772][T10532] bond0 (unregistering): Released all slaves [ 539.408863][T12485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.437159][T12485] veth0_vlan: entered promiscuous mode [ 539.448578][T12485] veth1_vlan: entered promiscuous mode [ 539.475401][T10532] IPVS: stop unused estimator thread 0... [ 539.485405][T12485] veth0_macvtap: entered promiscuous mode [ 539.494948][T12485] veth1_macvtap: entered promiscuous mode [ 539.510824][ T5799] Bluetooth: hci1: command tx timeout [ 539.516520][T12485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.534821][T12485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.548115][T12485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.558362][T12485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.567491][T12485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.577347][T12485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.607178][T12485] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 539.625528][T10523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.627438][T12485] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 539.636191][T10523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.658760][T10523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.666847][T10523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.590872][ T5799] Bluetooth: hci1: command tx timeout [ 543.680828][ T5799] Bluetooth: hci1: command tx timeout